I was wondering whether Netfilter can filter away packets handled by Linux bridge. If the bridge forwards the packet to another port, the packet never goes through IP routing, so Netfilter should handle it inside the bridge.
Also, is it possible to apply rules to packets according to the protocol type in Ethernet header (h_proto in struct ethhdr)? The man page says it is possible to apply rules according to source MAC, but says nothing about Ethernet protocol type. Fabrizio Gennari Philips Research Monza via G.Casati 23, 20052 Monza (MI), Italy tel. +39 039 2037816, fax +39 039 2037800